Mapping printers on Intune

 

Printers can be tricky, you really have to tailor things to the customer's needs and be ready to try different solutions to get them working properly. In a hybrid environment, we've had a hard time figuring out how to map printers on Autopilot devices without manually browsing for them.

As we were aware of the  "Print Nightmare" situation, we realized we needed to set up strict policies that only let the print server handle drivers and printer mapping.

According to this Article, non-admin users can't use Point and Print anymore without admin rights. During testing, we found that simply disabling the Point and Print restrictions would work,but it did not feel secure and left things too open. So instead, we created a policy that specifically allows connections only to a trusted print server and limits it to certain driver GUID classes (which you can find in the .INF file of the driver).

Device-->Configuration-->New Policy --> Settings Catalog -->Administrative Templates--> Printers --> System Driver Installation

The policy can be created on the Intune configuration profile. ( Settings Catalog) 

Device-->Configuration-->New Policy --> Settings Catalog -->Administrative Templates--> Printers --> Point and Print Restrictions

The next approach is now to create a Win32app on Intune . so we asked the question to see if this might be a automated deployment which will enforce to install to all devices but  its been decided to place it into company portal as an available app so users can install it when they're at office. 

Powershell script : 

Add-Printer -ConnectionName \\servername.domain.local\printername

Detection Rule 

this rule type will work as the detection rule

Registry 

Key Path 

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PrinterPorts

 

Once tested we confirm the printer maps as normal.

hope it helps ! see you next time.!